2024 Initiative Description and benefits Sophos SOC system (MDR) External 24/7 service that detects and responds to cyberattacks using advanced artificial intelligence and machine learning technologies. It enables continuous network monitoring, early identification of anomalous behaviour and automatic threat containment, reducing economic and reputational risks and supporting regulatory compliance. Fortinet internal firewall Device dedicated to controlling internal traffic between the server network and offices, enabling the detection and blocking of suspicious activity. It strengthens protection against internal and external threats, improves visibility over network communications and supports rapid response in case of anomalies. Vulnerability assessment Structured activity to assess vulnerabilities across networks and servers. It provides a detailed overview of critical issues, supports prioritisation of corrective actions and reduces the risk of attacks, while also providing evidence increasingly required by customers for compliance purposes. External penetration tests Activities carried out by certified companies to simulate cyberattacks and assess the resilience of corporate systems. They enable the identification of real vulnerabilities, testing the effectiveness of defences and strengthening organisational preparedness to respond to concrete threat scenarios. Phishing campaigns Periodic phishing attack simulations targeted at employees, designed to test responsiveness and identify any knowledge gaps. They strengthen the Company’s security culture and support the planning of targeted training courses on the most critical areas. IT hardware renewal programme Ongoing process of replacing obsolete equipment with more up-to-date and efficient devices. It improves overall IT infrastructure performance, reduces vulnerabilities linked to outdated systems and raises operational security standards. Cloud backup service (Cubbit) Remote backup solution provided by an Italian service provider, ensuring protection and rapid recovery of critical data. It supports business continuity even in the event of site unavailability, contributing to organisational resilience. Page 54 Sustainability Report 2024 In 2024, PRT completed a structured programme of investments and initiatives to strengthen cybersecurity and protect its information assets. These actions aim to prevent threats, reduce risks and ensure business continuity, strengthening the trust of customers and stakeholders and contributing to a secure and resilient IT environment. 2.3.3. Cybersecurity initiatives and investments
RkJQdWJsaXNoZXIy NDUyNTU=